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] ftJSHS* 1 - 1 - 1 - n THE. m&tt 

* S. 1 - 1 - 1 - n «. SQMIMtt«^fb» 

7*^-tTBE*-/<2«:2iS. BEt>--^2tt. WW 
(DHItRMl/. 3-3<D*fhJ-—*4- l~4-3^£ 
5. *fhf-><4- 1~4-3W. m\<DMffi* 
HSU ftlB*3S«:at-3i»r«tt*tf^. WHttTft. 

jahr-yu - 1-4-3 mm • mftbtcimmz 
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[aa»#©ain 

LT BET &BfE8B £ . 

a^aa^&a^xfA. 10 
[§9*52] «rsaasif8*tt. 
«aw*c j: *jtft>tifc««rts*"»{tor. a 1 ©us 
■fWI:S»!rtS*£fi»-S* i ©«§^b^st> 
fflSSt 1 ©«a{b?KtC «fc 0 Bg#tt3 tltcW 1 ©a#<t 

* umi vxm mmt&m ®**.m- z 
a2©«a<t#a£*aau 

BijieSMiS^OBiriem 2 ©aafk^SK j: <o ftmtzti 
tern 2 ©m^fcfi3Krts*a# bxm&m 1 ©a-«nba 
arts*aarsai©«a{b^«*Aau aaaa 20 

Bti3iMSg©f)is^ 1 ©a#<t#atcj: oaasnfc 
a 1 <oBt#{b«3«*3S ! &a-«»u-cwiBsa(rts*Kff"<' 
zm2<Dmmmmtz c £.*aa£*4a*a 

[ 11*9 3 ] ariaa 1 ©aa{b#8tt. 
SlMKcJ^tTfcftfcaWia*. ai©ftaa*«l«» 

rflHWbL. aai©#aa*. MiB«it«s©» 1 © 
aaasai'-caaftu 

«I2JI2©*WI*R«. 30 
«E!1 1 ©WWHMWJS*. a2©*ji£££ffll>TB§ 

aftu aa2©ftsa*. aEBS3B©a2©&a 
aiaa 1 ©aafwsw:. a#{t3ftfca2©#sa 

ft. aea2©$JI««c»lW*a2©tt*a*»lr»"C 

a#i/tiiBB»2©*fla*iR»-rs»2©«aaa# 
^S£> aastifca2©#aa*ai>-c. fris^2© 
•waaws*a^urwEa 1 ©aafbsows* 
aar s a 2 ©is#{ bjwwsf a-^b^a £ *«i a . 
*e»2©*<wfc#«tt. Bf^{b$n/c^i©*ji^ 40 
*. Miaa 1 ©aaatcaitrj- sa 1 ©aaa*a<r>r 
a-^bTtiige^ 1 ©saa*aarsa 1 ©£ii£*a-5i 
^©£> a#s*ifcai©*a«%m>-c. ^isai© 
Bt#itaarta*a^ o -ciwesairtssaar sa 1 
©aafMMW3saafb*R£*a*.sc i*aa£T 

519*5 2 IBU©a* &n->* f A. 

[19*54] aesffieatx. 

lb 3 nfcaaejafcat or <f > k»« *£i?£t 5 7 
9-oFa«*ata*. 50 
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Stiff Bf8»iS5fiM:, 

m%ic j: 0 «iR3 ti*taaa«:»i&T &&aft3&a 
*ti, araaatc&ar * a 3 ©b§^{ t*a £ . 

aCBE&B© ? 7 -f > F »S * ate «fc 0 £fi£ 3 tilt 7 

Fa** 6a*aa*a»r sa«a»*a£ * 
ax. * c £ *aai-r *a*a 1 l 3 ©i»rn*>© 
is^©mT-tss->x^A„ 
[19*55] afBattaatt. 
WBtsoirtaK*ti/"ca»oa«*4fiS-rsa8!mwB4« 

*&£, 

SijlB&Ilrt§£fijfBI$J3iJtS&£ £ fctcgfg? SSS^K 

i*a»r«ct*aai-r*«*aifti»i/4©t»r 

n*^©IBtS©^^lS:M^^ fA„ 

[19*5 6 3 Miaa 1 ©^ate«t ya 1 ©aaa. 
* h mc mum 2 ©ana* «t cfa 2 ©aaaa . a 
«. aiBKEaas/cttwgaait^atcaiittojaft. a- 

- Krt-eaa • aa 3 n * c t z®® 1 1 *s9*5 3 ft 
t,»L5©i»m*©ffia©a-T-aa^^f-A. 

[19*57 ] * 9 F 7- *(C«asnfc!BWl3|Q6>6 

ax*#&au 

wtastifcaartsfca-tfbb-t. aria* 9 f 7-* 

ic&mz n^BEEaatcaa u . 

agaasESiaB. &M^©BSE£m>. ssE3hfct§£ 

«. ltjlBBf^{t3*a/crtg?rB5IB*l+Kg«:ii{i L. 
MlB«tt^S«: ct o TBiiiBBf -f {tSlrtS?ra^ L/TS: 

Basani*iS(c»-5t»t:aaa©aa4a8hrsc £*a 
atriaflBBSra. 

[i9*58] aEttBH*». neaBflaaaafl: 

■aeBsaa». weiaai«*«: j: 0 aaftstifcaa 
{biaMrtSicWLTT'^^ > t--s«?:^t. 
suiaa:^s*»- 1513^7 > Ka**6a«aa*a 
ar 5 c £ *aa £ r znxn 1 iBts©^^ &w&&. 
[19*59] fjK«arts©a*nb-?tt. 
aajswaK j: 0 tf t>n/cSM^g* . a 1 ©ftiis^r 
m^xumtbxmsim 1 ©BafHHB*ia*4i«u. 
aea 1 ©ftaa*. fiiB*i+^g©® 1 ©^aa^a 

miiBa 1 ©aa<Htartst, a2©*aa*at»ra 

^tLra2©a#<ksairta*4fi!EL.. 

b?§b!ii 2 ©&»&*> aiBeEaa©a2©&aa«:a 

BiJgBBf-^{ba^rtS©a^{br«. 
frlBBf#{b3n/ca2©*jlgl?: > miim2<0&®mK. 

aist 5^2 ©aaa*a i»r aa l- r aiaa 2 ©ftii 

iriBa#3n^a2©^ii^ : &fflt,»T, iiriBa2©Bga 
IbSMrtif^aaormilBa l ©Bf^{bJS:^rt§?:IS(ff 



(3) 
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u 

tmm<t$titcm®&mi> tragi ©agate 
*ti&-f ass i <Dfflsmzm^?mb-cm%i% i ©£a 
a*gffu 

gea^ 5 tifcg i ©£aa*gt/>T . ttrie^ i ©bi 
fta:«rtg*agt/"t8strtg*ag t i c tiftmi. 

i mm l o i geasrtgtcg Lrmnmiz&tfz 

4^F»ir58l*17 tt^09 ©(,»r*u&»KlB«©g-?- 10 

sum 

[ ift*^ i i ] itreg i ©&«** J: o'g i ©8« 

ft & 6. WCgEg 2 ©&§flS!fc <fc tfg 2 ©#&&» . 

o ©n-f nanceis©^ siwii. 

[OOOl] 

[WP3©a-raa»a»] wim^ms 20 
gtt£©a»cgi,»"ctfa&« : f«ais'x?' AfcicHt 

[00023 

[ «£*©«* 3 6£* J: 0 . SRiM*>ii&£a*& £©St 
Mictei»T«. Wft^SHfiif-e. J8:ggffiK:gffi#fS; 

SaUfflfftSTg*, £<©A*-eittT 
oSg^ttfcgfr ft JdSM #J&S *«HL * *) > 5 

[00033 

&&. tit. eifft«B, 8*t«: J: 

EAsxKj:4iii&g*g«iga j g*.tt<'>. * 

fc. AtcJ:5iailB"C*4fcat>. «ft3*fciB0»4 

[00043 c©&Wtt±$i<fcga{ca#T&3ftfc 

*>©?, A^©fM. gg*^-X©*ii'J\ 
Ng©gg. »lf-3^©fiSl±*JBI-r*Ct3&»-C*** 

[0005] 

4fc«MC. 11*1 1 K«©«WCtt. *jF7-JK8 

raa8i5R«c4»»4inBsai#*. we* ^9-^ 

^•LTSE-rSSSE^ai. itilBiSE^g^^bTtiria 

9ma.tiMfict^WLtn. 50 
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[0 0 0 6 3 * M*ai2l2tt©»Wrtt. M$g 1 

iatsc©m^sm->xf Aicfe^T. gss&g&fti. a 
uttciotrtetifcjairtSiis^bL-c. gi©si^ 
<tsairts*4str £g 1 ©« g<i*g4 . me* 1 © 

■HWfcNiNc <t 0 *WtS l ©Bg^Hb&gftS* 

gg<t u-cg 2 ©«<wb«aws*£j(W *g 2 ©Bt-t 
ft#s<b*g«u msmsimt. gK&a&£©g 
em 2 ©fc^tfSfc «fc o ggft $ ftfcg 2 ©gg< La 
grts*a^t^TiiWBJiii ©BS^<t!!aws*wflir a 
gi©agft*a*g«u fuia*ftsg«:. meise 
gg©giEg 1 commt^mc «t 9 a^$ ftfcg 1 ©b§ 
g< b&nfl s* ag L/ r»EJsairt8*Kff-r a g 2 © 
agtt#a*g«i- act *«a t t*. 

[0 0 0 7] *fc. »gg3Ett©ggrtt. M$g2 
Ett©«*figf *f-A«:tot»T. SflEg 1 ©flWb* 
fitt. Off tohteJWW«*. gi©*aa 

*gtr»"C«g{tU R91©AOai%. WaUttHM) 

gi ©&na*gi»rgg{bu •«rEg2©ggfbgg 

tt. gEgl©ggffcS»l*3g*. g2©£ilg£m> 
■CggfbU Rg2©£iia*. gei8EgSH©g2© 

&ga*gi»Tggfl:u geg 1 ©agfb^ati, as 

gfl:3ftfcg2©#aa*. giBg2©&H«K*fj£r 
2 ©f^*gt»-cagO , OWIBg2 ©#a«*g 

f»-rs»2©ftjs«a^ai. a^ftfcg2©£s 
gggW. gEg2©ifgffc!Miirtg*agi/'cge 
g 1 ©Bg#{bsmrts?:sxf#-r ag2 oumt&mft® 
a-gffc*«t*«*. «riE»2©a^b*att. Bt^b 

3nfcgl©ftjiSI J &. WE* 1 ©&Hg«:*tifcT4g 

1 ©«flf«*ffli»ra^i/"cgBg 1 ©«a«*ggr 
4»i©Siiaa#*ai. a# snfcgi©«aa« 
fflt^r. gia»i©iis#fb!iartS4a#i/TiJEfa:g 
rt8*g»Tsg 1 ©iw<b!aairtsa^b#Ri*« 

[000 8] S/c. «#fll4iBtt©»WCB. tt«9 1 
<Cl> L 3 ©t>m*>©K«i©g : Hagi'X7- AKfcl* 
T, B5ESE^g«. Sg^IE^tt^IgET^ < . b3 

> -f > h-g«^ia?:«^- fires 

gg£tt. SBKgtCJ: 0aH?3tiA:gffl#tC3Hj5 , r*tB: 

nrts*«^t l> , gGBngtcaAf ag 3 ©bi^ 
BRShfc^^v K»«*6g«nwi*gg-rs»*ffi 

fi^ISi SrgA S C i *1$ &i T *. 
[0009] J/c, «*g5IBtt©»WCB. M«9 1 
&l» L 4 ©t,>m*>©ett©*-?-8:gi'* f" Atcfcl» 

■c. tinegttsg»s WEsairtStcwo-caBitiMii* 

SBWiJIf *B^lS*a i . «E&grtS*gSE»8l 

itf b i 4 h ccsa-r a sa#a 4 * jyrr a c 4 *«a 
tr*. 

[0 0 1 0 3 n«96Ett©ftfl'CB. it*^3 
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T, fijESfll©&P3&fcJ:tfSfn©*i«&, ft 6 Wit 
vSLft^cfcoic^a?-? f-Sftfc. 1 C*- KrtT&S 

[ooin iaufcraft^iBat 11*5 
7 Ei£©f&ET-B. *>h7-f tc&ttd ft/t&HS* 

T, gJiB* * h 9 - * tC^^S 5 ft fcfSHiSgtC jiff L . 10 
BtriBBEE&SB. !8:SC;f©SS!H£m>. ESSftfctB^ 
B. WEB|-^t3fttel^S*WIB«H«««:aSffllO. M 

[0 0 1 2] *fc. »*B8BEtt©»Wt?tt. 99*917 
[0 0 1 3 3 *fc, «*59EK©»MT». »#«7 

b. niB!a)ii«Kj:»)fft>nfcsaws*. ffn©«* 
miR^xnmtLTws&m i ©m-^bsmrtg^sx 
u iraa i ©^iisi*. nEmtsaoff i o^hm 

£m»T«f<t{tU BUIB^lCBf^ibfi^rt^. 312 
©ftjiSt^ffl^-CBf^bL-CS 2 ©uf #ft8MF^££ 
fifcU ffrKSI2©ftiI«*. litBBI5iE8E©32©ftH 30 
«*Bt»THNWtU lui3BS^bS^rtS©Wb-c 

B. |?riSBf^bSft/cSE2©ftjiSI?: > flirE£2©&B8 
BKcWJCf 2 ©ffcffi8£J?il>-C8Ht 1/ T hbIB^ 2 © 
#fl«*Btf*U WKfMSftfc*2©*a«*flit» 
T. KrlB»2©B§#{bi9^F t 3^ ; l:a^L/'rB5fBBl©B§ 
^HfciflS(rtS*WI 0. iWanf^tS titcm 1 ©SilSt 
*. ttlBft 1 ©&HMK*tj£T 1 ©fMStt*fflt>"C 
1J» L T WKfll 1 ©ttii^^Kfi 0. WIEtMS ftfcS 

i ©ftaa*fflt>T. ncjR 1 <Dt§mmmps®*Qi* 
bxiam^immtict^mLtti. 40 
[o 0 1 4] $/c mm 1 oKtt©»M"Ctt, st*9 
7 ftt,* u 9 ©i>-rftAHci2i£©m^a^^tcfc^r . 

=fefflB!8sKiJffi« i 4 (cSfiT S C i St £ f 
[ 0 0 1 5 ] S/c, 1 1 Ett©»WCtt. IS*5 

7ftt>U 1 0©^rft*HClEl£©^SM73^C*jlJ 

■t. miles 1 ©&iagite<fctfJS 1 ©*fcffi», feewi 

K»2©fiBMI*jJ:t) f lll2©«««tt, **. BEE&II 
Sfcttlim«B«:#Brafi6ft. fl-S5-Mf$R#iIi$bfti> 
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ftSC timktti. 

[0 0 1 6] C©»9rctt. *y bV-irlcmmstltc 

eBtset^uaiL. Ktassft/ctsairtg 

frfE*? h9-^(cg^$ftfcSSEJIStCj:«3SE 

9-**/n,-c> wieisassiK^iRSftr^smi+K 
**g©f#H£Siitir£. i/^-jt. a*©bik. mm 

it£ JPST S C £ AinTfg £ ft S . 
[0017] 

[»»©**©»»] «T. Hifl*ffll»'r*«9J©£* 

A. Hj&M*©^ 

SIB. *«W©HJBB»fc«ti*T-Sa(J/^?'A©fll 

-1. 1-2, •-, 1-nB, &H9fK:RS34-ifctt$ 
v h *) . x - v t ; u 3 > t a. - $ ft £* 6 $ ftt i > 
-2>. K&USS* 1 - 1 - 1 - n B, ^ ? I- 7 K 

ffittSti-Cl**. S3KMBR1- 1-1 -ntt. 1 o©& 
IlBfrtcjt&S (nfc) Sg^fttteO, *©BHI^« 
B> «siBfca:il-r5W«#©»«:i6orga)6tirt> 

[00 1 8] ±ESm«*l - 1-1 -nB. ^ffl^lt 
2fi©Bf^{b^1f i 5«^ft<!: ; &W-rS„ Cft6«t6 (tt 

ff) {coti-cBf^ars. 

[0019] s^#b. mm,* 1 - 1 - 1 - n ©£ » 

^<*;l/±©&?tf*>£*?*-fSC£-C. SM^?: 
sSSETSfc*© I D (SMSIffiS'J^-) ^^9- K. 
ffl^fti'^A^fS. ID. CTxB. H 

2(C^TJ:^CC, 3«jS©^-^C^§!lt. S^l/- 
^"tcS-fi&ttWS. ID. M-X7-KB. i^l^5|©!9: 
»*ie**u R*IB*i.>. A7J s ^%(6i«-r 4 /c©ic 

[ 0 0 2 0 ] ftfc. amiS* 1 - 1 - 1 - n B, 
©g^iCSS$ftt4>«t^^ i C©Ji^, Bf>E©^ffl 
V9 h^iT?:^©^ h-;H/-C*J<i£!>g*s*5. 

[0 02 1 ] K5Elf-^2B. -f>*-*7 hTZAL 
xmm^il ~ 1-1 -ntcMbT. ±EID, ^-^9 

miWEfi. *?c 2 B, -f > •» V 

7iftLr®m<Q?£i - 1~1 -nK:*tl<T. 

i-n*>e.©a*ti« (w-iwb*) Kf^y**** 

B, SMS*1 - 1 - 1 - n*>6©B|#ffc3ftte!5ai« 
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«£. aa$TS3£©»iW-— 'U-l. 4-2, 4- 

b. a*t©sE«:fT-*fc9; &mmzmmbtc*)T 

3 B. &*&»©! D. SIT. ffi 

[0 02 2] nHif-'U - 1~4-3 b. -en-ena* 
e>&-5. mtf-9- — '<4 - 1 ~4 - 3B. -e-n-en io 

ttS«:*SlijJ:af*fff'&tf5. iOftftttKtt. SfflHf 
-y<4- 1-4-3B, WWf-*2tPh<!>®m 
tiMRKtt 0 r . BSE? ->< 2 CC «fc 5 'f -f i> * JU*« 

-l. 5-2. 5-3(cfe#j-rs. -en-en©»tt^- 

/<4 - 1 ~4 - 3tc<l:S*it*SIIB. 5Wa8£3ft. 

[0 02 3] fcfc. ±£EUfcf2JiE1f-^2fc^mi-hJ- 

1-4-3-Ctt. «3Kt»«©B»^ia-**JJ: 20 

«©£«£«#. *5«i:C««£fiStt. ICfc-Ffci*© 
I C2>- F&6Sc#ttH*'&l,>«fc5K::7ci?-i> hSftTi,* 

^©■c. ffi£ti©as©Sfc (c©wcw:2. ftSH--^ 

[0 024] B . XHtiBftOttfRttC , @3KSf7U 30 
+ - h «r#MOr*HJSBS8©«J^(COt>-CSfifflK: 

&9i-r*. cc-c. 04«. vmv-xtohfivtth 

5B. ±!E&Hia&5fir©SBft ISSE?--^?©^. * 

tHf-;<r©ra*t©i$**jT< - titt£E'c* s. 

[ 0 0 2 5 ] ^©g^©ffi*tP6 

£') ^gift-r^ (Xf-^S 1 ) . sSS1r—^2tt. g 
ttLfctSHWteatl/T l D (8SI#BM!I*) . PW (;■»• 40 
*?-f) ^i2A$nfc->-;M^#«* 5 t (suns 

-^•2 mmsm) w^eittttKWflNfKSuri/- 

[0 02 6] &SIBCc&?>i. &HK#tsg3©Ni 
Kfrhim&T'i. g®c^*f*fcfci,»«ai#BS^ 
KIK83tiA:«aBKi#*r##l/r!jarar«:iiWiSf. « 

isjf©ii*a»5>sai*»5. &x#b. s«x»ta«0f 50 
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KRBShfc. &giS3l - i ( i = 1-n) 

[0 02 7 ]f2Slf-^2B. h7£7>0 
T, ±IBt83liiS*l - i KttLT I D. A*?- F*5«fc 
tfSi£B©A2>*g#T* <*f-»7S4) . 

b. assail- i©***^***^. i^tcsais 

nfcJ/-JW#B*S#ICEP$3nfc I D. ^X9-F. 
fcJctfKiB (MMDD) SrA^fS (Xr?7"S 
5). I D, i^TsV— KB. h 
i2Hir-^'2tcii{f £ftS„ 
[0 02 8] SBSE-!t--^2 B. iiB&Hiai* 1 - i 
A^Sttfc. ID. /t*7-F. teiUltB?:, ISSE 
^-ar^-^3©1tfgiKl^l/. Ebl>t93i#-C*S 

Shfcfltett. ISii1r-^2B. i^ffl^t»$B (&g. 8 
£. £. h7*fl-l/r±IB« 

133$ 1 - i Kilif Uf-; 7'S 7 ) . SH^tfiE 

tca^L. ^KSQK*^©«ffll**ih"i-a. 
[0 02 9] SMTH. «a«8* 1 - i Kli^S n** 

8 ) . ymm% 1 - i TB. 04 GCthTJ: ^(C. il 
S?8tifctt»t©fll* mT. ISRtffW) t^5-f>K 
(Bf#{b) L. h 7*/M/TS.Elf-A2 

K^TS (^f-^7"S9) . tSSElf-^TB. 04 

h7€r^LT. a»**i - iKasfli-r* <^f v^"s 

10) . JS:M«5S1 - i-CB, 04&C^f <fc5fc. ±IB 

(xt-^si l) . c©«t^cc. ^ 
vjyFmzzm^zctv. ssif-^2-cB. 

Stt©{SliE) . -e-Lz-C. i2SEl7--^(cj:0. *©««# 

[0 03 0] ^CT^-O KS«©^©WI«r*-r. S 
8E1f-^©«»» ! &d. 4J:HSI*e. n, &Htf ra 
iTS. $fcJilT©iS#Bn©f]^©Sr©<i©-C*> 

xibTigElt— /•?^3^tT'5. ISE^-^'Bx©dft 
iytbTSaiia^SSW-rs. C©y*«^7-f>K» 
«-C*S„ «Ol**By*r'CllftJ|tr5. d=l/eT 
*5©-C. l^mSmBmWdmi^ 1 ?. ChBm{C*tt 
S¥«-?-©*>©-C$.-5>. 

[00 3 1 ] S^iffi* 1 - i "CB. 0 5 IC^-T <fc 
±IB!2:Slt»$g (r-f JUSS%#tf) *£*f§jA 
(Cj:»3*»Ltefft (^f-^'S 1 2) . 3 MjiiB 
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(CfciJffiitL v7S 13). h7£ 

5K^1"J:^tC. W|iJ©£fil5B©*£^£ri, (ZTV? 
S14), *|+-9--;n'4 -1-4-3 K&{f *S. Hit 
t-;U-l-4-3t«. H5tC7n-r<i:5&c. SIS A 
(Xr-^'S 15) , TcO&mffi® (tj'JZ 

[003 2] feme. ±ISS^^ 1-1-1-ntO 
Sit BEtf-^r©^!! - 1 -4 - 

3r©gstt&c^i>TJ:9f¥fflKt&Bjj-f 3,, ccr. 06 10 
«. ±IB&llffi3rc©S£l©mffl&^£^T$&0T 

[003 3] 1 - 1 - 1 - n "CM:, 06 Knvf 
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(54) {Title of invention} Electronic voting system and electronic voting method 



(57) {Abstract} 

{Problem} To achieve reduction in amount of labor, reduction 
of ballot opening space, elimination of invalid ballots and 
questionable ballots, and prevention of counting errors. 
{Solution} Voters vote at voting terminals 1-1 through 1-n by 
using a touch panel. An authentication server 2 generates a blind 
signature for the vote information to authenticate the voter. 
Voting terminals 1-1 through 1-n seal the vote information in a 
double electronic envelope by means of encryption techniques 
and send it over the internet 7 to the authentication server 2. The 
authentication server 2 unseals the outer envelope and sends the 
result to three counting servers 4-1 through 4-3. Each of the 
counting servers 4-1 through 4—3 unseals the inner envelope 
and performs counting based on the vote content. After opening 
of ballots is completed, the counting servers 4-1 through 4-3 
compare the collected and counted results of voting, and in case 
a discrepancy is discovered, determine the correct value by 
majority decision. 
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1-1, 1-2, 1-n: Voting terminal 
2: Authentication server 
3: Authentication DB 

4- 1,4-2, 4-3: Counting server 

5- 1 , 5-2, 5-3: Counting DB 
7: Internet 

A: ID (voter identifier) 
PW (password) 
Name 
Address 

Voting status (registered, voting in progress, voting completed) 
B: Vote information 
Vote identifier 
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{Scope of patent Claims} 

{Claim 1} An electronic voting system distinguished in that it 
comprises: 

a voting terminal connected to a network, which encrypts the 
content of votes cast by voters for candidates and generates 
encrypted vote content; 

an authentication device which authenticates said voters at said 
voting terminal via said network; and 

a counting device which decrypts the encrypted vote content 

obtained from said voting terminal via said authentication 

device to acquire the vote content, and counts the votes obtained 

by candidates based on said vote content. 

{Claim 2} An electronic voting system as described in Claim 1, 

distinguished in that: 

said voting terminal comprises 

a first encryption means which encrypts the content of the vote 
cast by the voter to generate a first encrypted vote content; and 
a second encryption means which encrypts the first encrypted 
vote content encrypted by said first encryption means to 
generated a second encrypted vote content; 
said authentication device comprises: 

a first decryption means which decrypts the second encrypted 
vote content encrypted by said second encryption means of said 
voting terminal to obtain said first encrypted vote content; 
and said counting device comprises: 

a second decryption means which decrypts the first encrypted 

vote content decrypted by said first decryption means of said 

authentication device to obtain said vote content. 

{Claim 3} An electronic voting system as described in Claim 2, 

distinguished in that said first encryption means 

encrypts the content of the vote cast by the voter using a first 

common key and encrypts said first common key using a first 

public key of said counting device; 

said second encryption means 

encrypts said first encrypted vote content using a second 
common key and encrypts said second common key using a 
second public key of said authentication device; 
said first decryption means comprises a second common key 
decryption means which decrypts the encrypted second common 
key using a second secret key corresponding to said second 
public key to obtain said second common key, and a second 
encrypted vote content decryption means which decrypts said 
second encrypted vote content using the decrypted second 
common key to obtain said first encrypted vote content; 
and said second decryption means comprises a first common 
key decryption means which decrypts the encrypted first 
common key using a first secret key corresponding to said first 
public key to obtain said first common key, and a first encrypted 
vote content decryption means which decrypts said first 
encrypted vote content using the decrypted first common key to 
obtain said vote content. 

{Claim 4} An electronic voting system as described in any of 
Claims 1 through 3, distinguished in that 
said authentication device comprises: 

a blind signing means which generates a blind signature for the 
vote content encrypted by said voting terminal to authenticate 
the legitimacy of the voter; 
and said voting terminal comprises: 
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a third encryption means which encrypts the content of the vote 
for candidates selected by the voter and transmits it to said 
authentication device; and 

a signature acquisition means which acquires signature 

information from the blind signature generated by the blind 

signing means of said authentication device. 

{Claim 5} An electronic voting system as described in any of 

Claims 1 through 4, distinguished in that: 

said counting device comprises: 

an identification information generating means which generates 
identification information for said vote content; and 
a storage means which stores said vote content together with 
said identification information. 

{Claim 6} An electronic voting system as described in any of 
Claims 3 through 5, distinguished in that said first public key 
and first secret key as well as said second public key and second 
secret key are each generated and managed within an IC card 
that can be installed in and removed from said authentication 
device or said counting device and which is protected so as to 
prevent external leakage of information. 
{Claim 7} An electronic voting method distinguished in that: 
a voter casts a vote from a voting terminal connected to a 
network; 

said cast vote content is encrypted and transmitted to an 
authentication device connected to said network; 
said authentication device performs authentication of the voter, 
and if he was authenticated, transmits said encrypted content to 
said counting device; 

said encrypted vote content is decrypted by said counting device 
to obtain the vote content; and 

the votes obtained by candidates are counted based on said vote 
content. 

{Claim 8} An electronic voting method as described in Claim 7, 
distinguished in that: 

said voting terminal encrypts said vote content to generate 
encrypted vote content; 

said authentication device generates a blind signature for the 
encrypted vote content encrypted by said voting terminal; and 
said voting terminal obtains signature information from said 
blind signature. 

{Claim 9} An electronic voting method as described in Claim 7, 

distinguished in that: 

in the encryption of said vote content, 

the content of the vote cast by said voter is encrypted using a 
first common key to generate said first encrypted vote content; 
said first common key is encrypted using a first public key of 
said counting device; 

said first encrypted vote content is encrypted using a second 

common key to generated second encrypted vote content; 

said second common key is encrypted using a second public key 

of said authentication device; 

and in the decryption of said encrypted vote content, 

said encrypted second common key is decrypted using a second 

secret key corresponding to said second public key to obtain 

said second common key; 

said second encrypted vote content is decrypted using said 
decrypted second common key to obtain said first encrypted 
vote content; 
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said encrypted first common key is decrypted using a first secret 
key corresponding to said first public key to obtain said first 
common key; and . 

said first encrypted vote content is decrypted using said 
decrypted first common key to obtain the vote content. 
{Claim 10} An electronic voting method as described in any of 
Claims 7 through 9, distinguished in that identification 
information is generated for said vote content, and said vote 
content is stored together with said identification information. 
{Claim 1 1} An electronic voting method as described in any of 
Claims 7 through 10, distinguished in that said first public key 
and first secret key as well as said second public key and second 
secret key are each generated and managed within an IC card 
that can be installed in and removed from the authentication 
device or counting device and which is protected so as to 
prevent external leakage of information. 
{Detailed description of the invention} 
{0001} 

{Technical field of the invention} The present invention relates 
to electronic voting systems and electronic voting method 
suitably used in voting in national political elections, regional 
elections and the like. 
{0002} 

{Prior art} In the prior art, voting in national political elections, 
regional elections and the like has been carried out by having 
eligible voters write the names of candidates on ballots at 
polling places, gathering said ballots, and confirming and 
counting the candidate names written on the ballots, one by one, 
with much labor. 
{0003} 

{Problem to be solved by the invention} However, in the 
aforementioned prior art, large amounts of labor and ballot 
opening space is required. Furthermore, since the voter name is 
written by hand by the voter, invalid votes and questionable 
votes due to clerical errors cannot be eliminated. Furthermore, 
due to the visual confirmation by people, there was the problem 
that counting errors would also occur. 

{0004} This invention was made in view of the above situation, 
and has the objective of providing an electronic voting system 
and electronic voting method capable of achieving reduction in 
amount of labor, reduction of ballot opening space, elimination 
of invalid ballots and questionable ballots, and prevention of 
counting errors. 
{0005} 

{Means of solving the problem} To resolve the aforesaid 
problems, the invention described in Claim 1 is distinguished in 
that it comprises a voting terminal connected to a network, 
which encrypts the content of votes cast by voters for candidates 
and generates encrypted vote content; an authentication device 
which authenticates said voters at said voting terminal via said 
network; and a counting device which decrypts the encrypted 
vote content obtained from said voting terminal via said 
authentication device to acquire the vote content, and counts the 
votes obtained by candidates based on said vote content. 
{0006} Furthermore, the invention described in Claim 2 is 
distinguished in that, in the electronic voting system described 
in Claim 1, said voting terminal comprises: a first encryption 
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means which encrypts the content of the vote cast by the voter 
to generate a first encrypted vote content, and a second 
encryption means which encrypts the first encrypted vote 
content encrypted by said first encryption means to generated a 
second encrypted vote content; said authentication device 
comprises a first decryption means which decrypts the second 
encrypted vote content encrypted by said second encryption 
means of said voting terminal to obtain said first encrypted vote 
content; and said counting device comprises a second 
decryption means which decrypts the first encrypted vote 
content decrypted by said first decryption means of said 
authentication device to obtain said vote content. 
{0007} Furthermore, the invention described in Claim 3 is 
distinguished in that, in the electronic voting method system 
described in Claim 2, said first encryption means encrypts the 
content of the vote cast by the voter using a first common key 
and encrypts said first common key using a first public key of 
said counting device; said second encryption means encrypts 
said first encrypted vote content using a second common key 
and encrypts said second common key using a second public 
key of said authentication device; said first decryption means 
comprises: a second common key decryption means which 
decrypts the encrypted second common key using a second 
secret key corresponding to said second public key to obtain 
said second common key, and a second encrypted vote content 
decryption means which decrypts said second encrypted vote 
content using the decrypted second common key to obtain said 
first encrypted vote content; and said second decryption means 
comprises: a first common key decryption means which 
decrypts the encrypted first common key using a first secret key 
corresponding to said first public key to obtain said first 
common key, and a first encrypted vote content decryption 
means which decrypts said first encrypted vote content using the 
decrypted first common key to obtain said vote content. 
{0008} Furthermore, the invention described in Claim 4 is 
distinguished in that, in the electronic voting system as 
described in any of Claims 1 through 3, said authentication 
device comprises a blind signing means which generates a blind 
signature for the vote content encrypted by said voting terminal 
to authenticate . the legitimacy of the voter; and said voting 
terminal comprises a third encryption means which encrypts the 
content of the vote for candidates selected by the voter and 
transmits it to said authentication device, and a signature 
acquisition means which acquires signature information from 
the blind signature generated by the blind signing means of said 
authentication device. 

{0009} Furthermore, the invention described in Claim 5 is 
distinguished in that, in the electronic voting system as 
described in any of Claims 1 through 4, said counting device 
comprises an identification information generating means which 
generates identification information for said vote content, and a 
storage means which stores said vote content together with said 
identification information. 

{0010} Furthermore, the invention described in Claim 6 is 
distinguished in that, in the electronic voting system as 
described in 
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any of Claims 3 through 5, said first public key and first secret 
key as well as said second public key and second secret key are 
each generated and managed within an IC card that can be 
installed in and removed from said authentication device or said 
counting device and which is protected so as to prevent external 
leakage of information. 

{0011} To resolve the aforementioned problems, the invention 
described in Claim 7 is distinguished in that a voter casts a vote 
from a voting terminal connected to a network; said cast vote 
content is encrypted and transmitted to an authentication device 
connected to said network; said authentication device performs 
authentication of the voter, and if he was authenticated, 
transmits said encrypted content to said counting device; said 
encrypted vote content is decrypted by said counting device to 
obtain the vote content; and the votes obtained by candidates are 
counted based on said vote content. 

{0012} Furthermore, the invention described in Claim 8 is 
distinguished in that, in the electronic voting method as 
described in Claim 7, said voting terminal encrypts said vote 
content to generate encrypted vote content; said authentication 
device generates a blind signature for the encrypted vote content 
encrypted by said voting terminal; and said voting terminal 
obtains signature information from said blind signature. 
{0013} Furthermore, the invention described in Claim 9 is 
distinguished in that, in the electronic voting method as 
described in Claim 7, in the encryption of said vote content, the 
content of the vote cast by said voter is encrypted using a first 
common key to generate said first encrypted vote content; said 
first common key is encrypted using a first public key of said 
counting device; said first encrypted vote content is encrypted 
using a second common key to generated second encrypted vote 
content; said second common key is encrypted using a second 
public key of said authentication device; and in the decryption 
of said encrypted vote content, said encrypted second common 
key is decrypted using a second secret key corresponding to said 
second public key to obtain said second common key; said 
second encrypted vote content is decrypted using said decrypted 
second common key to obtain said first encrypted vote content; 
said encrypted first common key is decrypted using a first secret 
key corresponding to said first public key to obtain said first 
common key; and said first encrypted vote content is decrypted 
using said decrypted first common key to obtain the vote 
content. 

{0014} Furthermore, the invention described in Claim 10 is 
distinguished in that, in the electronic voting method as 
described in any of Claims 7 through 9, identification 
information is generated for said vote content, and said vote 
content is stored together with said identification information. 
{0015} Furthermore, the invention described in Claim 11 is 
distinguished in that, in the electronic voting method as 
described in any of Claims 7 through 10, said first public key 
and first secret key as well as said second public key and second 
secret key are each generated and managed within an IC card 
that can be installed in and removed from the authentication 
device or counting device and which is protected so as to 
prevent external leakage of information. 
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{0016} In this invention, a voter casts a vote from a voting 
terminal connected to a network; said cast vote content is 
authenticated by an authentication device connected to said 
network; said authenticated vote content is encrypted and 
transmitted to a counting device connected to said 
authentication device; said encrypted vote content is decrypted 
by said counting device to obtain the vote content; and the votes 
obtained by candidates are counted based on said vote content. 
Thus, it becomes possible to achieve reduction in amount of 
labor, reduction of ballot opening space, elimination of invalid 
ballots and questionable ballots, and prevention of counting 
errors, 
{0017} 

{Modes of embodiment of the invention} Below, modes of 
embodiment of the present invention are described using the 
drawings. 

A. Constitution of the mode of embodiment 
Figure 1 is a block diagram showing the constitution of an 
electronic voting system according to a mode of embodiment of 
the present invention. In Figure 1, voting terminals 1-1, 1-2, 
1-n are terminals installed at a polling place, and are made up of 
personal computers and the like. Said voting terminals 1-1 
through 1-n are connected to the internet 7. Multiple (n) voting 
terminals 1-1 through 1-n are installed at a single polling place, 
the number of terminals installed being detenriined in 
accordance with the number of eligible voters voting at the 
polling place. 

{0018} Said voting terminals 1-1 through 1-n have the function 
of encrypting candidate information, the function of decrypting 
(unblinding) digital signatures generated by the authentication 
server 2 described below, as well as the function of performing 
double encryption on candidate information and digital 
signatures, and the like. These functions (operations) will be 
discussed below. 

{0019} A voter enters an ID (voter identifier) and password for 
authenticating the voter, as well as candidates and the like, by 
touching numerical buttons on the touch panel of the voting 
terminals 1-1 through 1-n, The ID and password are for 
instance divided into groups of three columns, and each group is 
numbered. In consideration of elderly voters and the like, the ID 
and password are preferably made up of numerals only, so as to 
reduce misreading or input errors. 

{0020} The voting terminals 1-1 through 1-n may also be 
installed at a voter's home, in which case specific voting 
software needs to be installed in advance. 
{0021} The authentication server 2 requests said ID, password, 
birth date, etc. from the voting terminals 1-1 through 1-n via 
the internet 7, and verifies those pieces of information to 
authenticate the voter. Furthermore, the authentication server 2 
transmits candidate information (name, party, face photograph) 
to the voting terminals 1-1 through 1-n via the internet 7, and 
issues a digital signature (blind signature) for (encrypted) vote 
information from the voting terminals 1-1 through 1-n. 
Moreover, the authentication server 2 transmits encrypted vote 
information from the voting terminals 1-1 through 1-n to three 



(5) 

counting servers 4-1, 4-2 and 4-3, which are described below. 
Moreover, the authentication server 2 comprises an 
authentication database for performing voter authentication, 
managing voting status, etc. Said authentication database 3 
stores each voter's ID, password, name, address and voting 
status (registered, voting in progress, voting completed). 
{0022} The counting servers 4-1 through 4-3 consist of three 
physically separated servers having the same functions. The 
counting servers 4-1 through 4-3 each independently perform 
vote collection and counting. More specifically, the counting 
servers 4-1 through 4-3 verify the digital signature made by the 
authentication server 2 for vote information from the 
authentication server 2, generate and append a vote identifier 
thereto, and store it in counting databases 5-1, 5-2 and 5-3. The 
results of counting by the respective counting servers 4-1 
through 4-3 are compared to each other, and if a discrepancy is 
discovered, the correct value is determined by majority decision. 
{0023} The aforementioned authentication server 2 and 
counting servers 4-1. through 4-3 are made to perform 
encryption, decryption and digital signing of vote information; 
the generation of secret keys used in said encryption, decryption 
and digital signing, as well as decryption and signature 
generation, are performed on a storage medium such as an IC 
card. The secret key is protected so that it cannot be read out 
from the IC card. Thus, since backups against loss or the like 
cannot be made, as many signings and encryptions are 
performed as the number of secret keys (2 in this example; 3 in 
case of counting servers) to provide redundancy. 
{0024} B. Operation of the mode of embodiment 
Next, operation of the present mode of embodiment is described 
in detail with reference to the flow chart shown in Figure 3. 
Here, Figure 4 is a flow chart showing the process of obtaining a 
digital signature from the authentication server. Furthermore, 
Figure 5 is a conceptual drawing which shows the situation of 
envelope sealing at said voting terminals, unsealing at the 
authentication server and unsealing at the counting servers. 
{0025} A voter accesses the authentication server in advance 
via the internet from a terminal at his home and registers 
personal information (name, address, etc.) from an election 
administration Web screen presented by the authentication 
server (Step SI). The authentication server 2 mails a sealed 
postcard (voting card) with the ID (voter identifier) and PW 
(password) for the registered voter inscribed thereon to the 
voter's home (Step S2). Since there are eligible voters who may 
not have a terminal at home, sealed postcards (voting cards) 
may also be automatically mailed to the homes of eligible voters 
from the authentication server 2 (competent government office), 
as per the current practice. 

{0026} Next, on polling day, voters cast votes from the 
terminals at their home. Voters who do not have a terminal at 
home take the voting card mailed to their home and go to a 
polling place, and cast votes from terminals at the polling place. 
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Voters commence voting from a voting terminal 1-i (i = 1 -~ n) 
installed at home or at a polling place (Step S3). 
{0027} The authentication server 2 requests input of ID, 
password and birth date from said voting terminal 1-i via the 
internet 7 (Step S4). The voter inputs the ID, password and birth 
date (MMDD) printed on the sealed postcard mailed to his home 
via the touch panel of the voting terminal 1-i (Step S5). The ID 
and password are transmitted via the internet 7 to the 
authentication server 2. 

{0028} The authentication server 2 compares the ID, password 
and birth date input from said voting terminal 1-i against 
information in the authentication database 3 to check if this is a 
proper voter, i.e. an eligible voter, and that this is not a case of 
duplicate voting (Step S6). If the voter was authenticated as 
being legitimate, the authentication server 2 transmits candidate 
information (name, party, face photograph, etc.) via the internet 
7 to said voting terminal 1-i (Step S7). If the voter was not 
authenticated as legitimate, that fact is displayed on the voting 
terminal 1-i and processing for the voter in question is 
discontinued. 

{0029} The voter confirms the candidate information displayed 
on the voting terminal 1-i and selects (votes for) candidates 
(Step S8). The voting terminal 1-i, as shown in Figure 4, blinds 
(encrypts) the selected candidate information (hereinafter, vote 
information) and transmits it via the internet 7 to the 
authentication server 2 (Step S9). The authentication server 2, as 
shown in Figure 4, generates a digital signature (blind signature) 
for said encrypted vote information and transmits it via the 
internet 7 to the voting terminal 1-i (Step S10). The voting 
terminal 1-i, as shown in Figure 4, unblinds (decrypts) said 
blind signature to obtain a digital signature (Step SI 1). In this 
way, by using a blind signature, the authentication server 2 can 
ascertain the voter but cannot find out the vote content 
(guarantee of anonymity). Furthermore, the authentication 
server authenticates the voter's identity, that the vote content 
was produced by that voter, and that the vote was not cast in 
duplicate. 

{0030} Next, an example of the blind signing scheme is 
described. It is assumed that d is the authentication server's 
secret key, e and n are the public keys, and m is the vote 
information. Furthermore, the computational operations below 
are based on the residue of n. The voting terminal generates a 
random number r, and sends the product of r to the power of e 
and m to the authentication server as x. The authentication 
server takes x to the power of d and sends it to the voting 
terminal as y. This y is the blind signature. The voting terminal 
divides y by r. Since d = 1/e, the results of the division will be m 
to the power of d, which is the signature for m proper. 
{0031} Next, the voting terminal 1-i, as shown in Figure 5, 
seals said vote information (including digital signature) in an 
envelope A (Step SI 2), and then again seals it in an envelope 
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B (Step SI 3) and transmits it via the internet 7 to the 
authentication server 2. The authentication server 2, as shown in 
Figure 5, unseals only the outer envelope B (Step SI 4) and 
transmits the result to the counting servers 4-1 through 4-3. The 
counting servers 4-1 through 4-3, as shown in Figure 5, unseal 
the envelope A (Step SI 5) and obtain the original vote 
information (including digital signature). 
{0032} Below, the sealing of the envelope at said voting 
terminals 1-1 through 1-n, the unsealing at authentication 
server 2 and unsealing at the counting servers 4-1 through 4-3 
is described in more detail. Here, Figure 6 is a conceptual 
drawing which shows the detailed situation of sealing at said 
voting terminals. Furthermore, Figure 7 is a conceptual drawing 
which shows the detailed situation of unsealing at said 
authentication server and counting servers. 
{0033} At the voting terminals 1-1 through 1-n, as shown in 
Figure 6, the aforementioned vote information (including digital 
signature) is encrypted with a common key KA1 (Step Sal), 
thereby sealing it in envelope A, and then said common key 
KA1 is encrypted with a public key KB1 published by the 
counting servers 4-i (i = 1, 2, 3) (Step Sa2). Next, the encrypted 
vote information (envelope A) is further encrypted with 
common key KA2 (Step Sa3) to seal it in envelope B, after 
which said common key KA2 is encrypted with a public key 
KB2 published by the authentication server 2 (Step Sa4). The 
vote information is thereby sealed (encrypted) doubly, in 
envelope A (inner) and envelope B (outer). Said double 
encrypted vote information is transmitted via the internet 7 to 
the authentication server 2. 

{0034} At the authentication server 2, as shown in Figure 7(a), 
the encrypted common key KA2 is decrypted with the secret 
key KC2 corresponding to said public key KB2 to obtain said 
common key KA2 (Step Sbl) and said double encrypted vote 
information (inner: envelope A; outer: envelope B) is decrypted 
with said common key KA2 to unseal the outer envelope B 
(Step Sb2). The vote information sealed in envelope A is then 
transmitted to the counting servers 4-1 through 4-3. 
{0035} At the counting server 4-i (i = 1, 2, 3), as shown in 
Figure 7(b), the encrypted common key KA 1 is decrypted by the 
secret key KC1 corresponding to said public key KB1 to obtain 
the common key KA1 (Step Scl), and said vote information 
(envelope A) is decrypted with said common key KA1 to unseal 
envelope A (Step Sc2). At this point, the counting server 4-i 
obtains the original vote information (including digital 
signature). 

{0036} In the foregoing description, the present mode of 
embodiment employs three counting servers 4-1 through 4-3, 
so in actuality, the counting servers would each generate their 
respective secret key KC1-1, KC1-2 or KC1-3 and the public 
key KB 1-1, KB 1-2 or KB 1-3 corresponding to said secret key. 
Then the voting terminal 1-i, when sealing the vote information 
in envelope A, would encrypt the common key KA1 with each 
of said public keys KB1-1, KB 1-2 and KB1-3. 
{0037} Returning to Figure 3, next, the counting servers 4-1 
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through 4-3 verify the authentication server signature based on 
the digital signature to check whether or not the vote 
information has been authenticated by the authentication server 
2 (Step SI 6). Next, the counting servers 4-1 through 4-3 
generate an identifier, for instance by taking the current date, 
hour, minute, second, millisecond and microsecond data as a 
hash value (Step SI 7), append it to the vote information and 
store it in the counting databases 5-1 through 5-3, and also 
count the vote based on the vote information. After completion 
of ballot opening, the voting results from the ballots collected 
and counted independently at each of the counting servers 4-1 
through 4-3 are compared, and if a discrepancy is discovered, 
the correct value is determined by majority decision. 
{0038} 

{Effect of the invention} As described above, according to the 
present invention, voters cast votes from voting terminals 
connected to a network, said cast vote content is authenticated 
by an authentication device connected to said network, said 
authenticated vote content is encrypted and transmitted via said 
network to a counting device connected to said authentication 
device, said encrypted vote content is decrypted by said 
counting device to obtain the vote content, and the votes 
obtained by candidates are counted based on said vote content, 
thereby providing the advantages of allowing one to achieve 
reduction in amount of labor, reduction of ballot opening space, 
elimination of invalid ballots and questionable ballots, and 
prevention of counting errors. 
{Brief description of the drawings} 

{Figure 1 } A block diagram showing the constitution of an 
electronic voting system according to a mode of embodiment of 
the present invention. 

{Figure 2} A conceptual diagram showing the constitution of 
the voter ID and password according to the present mode of 
embodiment, 

{Figure 3} A flow chart explaining the operation of an 
electronic voting system according to a mode of embodiment of 
the present invention. 

{Figure 4} A flow chart showing the process of obtaining a 

digital signature from the authentication server. 

{Figure 5} A conceptual drawing showing the situation of 

envelope sealing at voting terminals, unsealing at the 

authentication server, and unsealing at the counting servers. 

{Figure 6} A conceptual drawing which shows the detailed 

situation of envelope sealing at the voting terminals. 

{Figure 7} A conceptual drawing which shows the detailed 

situation of envelope unsealing at the authentication server and 

counting servers. 

{Description of captions} 
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5- 1 ~ 5-3 Counting database 
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